{"cvss":0.0,"datePublished":"2024-12-19","dateUpdated":"2024-12-19","description":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user. ","dueDate":"2024-12-27","id":"CVE-2024-12356","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 ; https://nvd.nist.gov/vuln/detail/CVE-2024-12356","product":"Privileged Remote Access (PRA) and Remote Support (RS) ","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability ","vendor":"BeyondTrust"}